proactive security ?

[pumpkins]

Hi Guys!

I'l have a question: anyone try to use
GrSec/PaX/SSP/ExecShield/PIE protection?
is this possible? can be any problems with whis (kernel build,
package compiling and using etc)?

[JLO]

Alright, I'm kinda glad you brought that up. I'm wanting to remove pax from the grsecurity patch (I would like to keep the other features), and try this patch out on a 2.4.32 kernel:
http://aslp.kavefish.net/

[tosh]

I'l have a question: anyone try to use
GrSec/PaX/SSP/ExecShield/PIE protection?
is this possible? can be any problems with whis (kernel build,
package compiling and using etc)?

I am using GrSec/PaX/SSP/PIE.
ExecShield is similar to PaX so mixing both may not work or even dosn't make sense.

To get randomization of executables in kernel 2.6 you should use PIE if i am correct PaX don't do that in 2.6 kernels any more (kernel does it by itself).

SSP helps preventing return to glibc atacks which GrSec/PaX cannot stop so it is a good fulfit.